APPARATUS AND METHOD FOR GENERATING ELECTRONIC BOOK, AND APPARATUS AND METHOD FOR VERIFYING INTEGRITY OF ELECTRONIC BOOK

• US 20150019874A1
• Filed: 12/27/2012
• Published: 01/15/2015
• Est. Priority Date: 02/21/2012
• Status: Abandoned Application

• Current Assignee: Fasoo Com Co Ltd
• Original Assignee: Fasoo Com Co Ltd
• Inventors: Park, Chel, Kim, Sun-Young, Kim, Eun-Bum
• Application Number:
  US14/378,423
• Publication Number:
  US 20150019874A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/1075 Editing
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures

Abstract

Disclosed are an apparatus and method for generating an electronic book (e-book) and an apparatus and method for verifying integrity of an e-book. An e-book including information for verifying the integrity of the e-book is generated, and the integrity of an e-book is verified from information included in the e-book to determine whether or not the e-book has been falsified. Accordingly, an e-book is generated to conform to the electronic publication (EPUB) standard and to include information for protecting the copyright of the e-book, so that the e-book market can be activated.

Claims

1. An apparatus for verifying integrity of an electronic book (e-book), the apparatus comprising:

an e-book receiving unit configured to receive e-book data including e-book e-signature data including e-signature-object information including a fourth digest value generated by applying a second hash function to e-book basis data including title information of the e-book, a first digest value generated by applying a first hash function to the e-signature-object information, an e-signature value generated by applying an encryption function employing a private key as an encryption key to the first digest value, and a public key value corresponding to the private key, and the e-book basis data; and

an e-book integrity verification unit configured to verify integrity of the e-book data received through the e-book receiving unit by comparing at least one of a fifth digest value generated by applying the encryption function employing the public key as a decryption key to the e-signature value and a sixth digest value generated by applying the first hash function to the e-signature-object information with the first digest value.

2. The apparatus of claim 1, wherein the e-book data further includes at least one of e-book usage rights data including usage period information and legal user information of the e-book and e-book encryption data including information on encryption of the e-book,

the e-signature-object information further includes at least one of a third digest value generated by applying the second hash function to the e-book usage rights data and a second digest value generated by applying the second hash function to the e-book encryption data, and

the e-book integrity verification unit verifies the integrity of the e-book data by comparing a ninth digest value generated by applying the second hash function to the e-book basis data with the fourth digest value and comparing an eighth digest value generated by applying the second hash function to the e-book usage rights data with the third digest value or comparing a seventh digest value generated by applying the second hash function to the e-book encryption data with the second digest value.

3. The apparatus of claim 1, further comprising an e-book usage rights verification unit configured to access a copyright management apparatus based on access information of the copyright management apparatus and verify usage rights to the e-book,

wherein the e-book basis data further includes the copyright management apparatus access information.

4. The apparatus of claim 1, further comprising an e-book output unit configured to output the e-book data when the e-book integrity verification unit determines that the received e-book data has not been falsified.

13. The apparatus of claim 2, further comprising an e-book usage rights verification unit configured to access a copyright management apparatus based on access information of the copyright management apparatus and verify usage rights to the e-book,

wherein the e-book basis data further includes the copyright management apparatus access information.

14. The apparatus of claim 2, further comprising an e-book output unit configured to output the e-book data when the e-book integrity verification unit determines that the received e-book data has not been falsified.

5. An apparatus for generating an electronic book (e-book), the apparatus comprising:

a digest unit configured to generate a fourth digest value by applying a second hash function to e-book basis data including title information of the e-book, and generate a first digest value by applying a first hash function to e-signature-object information including the fourth digest value;

an e-signature unit configured to generate an e-signature value by applying an encryption function employing a private key as an encryption key to the first digest value; and

an e-book generation unit configured to generate e-book data including e-book signature data including the e-signature-object information, the first digest value, the e-signature value, and a public key value corresponding to the private key, and the e-book basis data.

6. The apparatus of claim 5, wherein the digest unit generates a third digest value by applying the second hash function to e-book usage rights data including usage period information and legal user information of the e-book, generates a second digest value by applying the second hash function to e-book encryption data including information on encryption of the e-book, and generates the first digest value by applying the first hash function to the e-signature-object information including the fourth digest value and at least one of the third digest value and the second digest value, and

the e-book generation unit generates the e-book data including the e-book signature data and at least one of the e-book usage rights data and the e-book encryption data.

7. A method of verifying integrity of an electronic book (e-book), the method comprising:

receiving e-book data including e-book e-signature data including e-signature-object information including a fourth digest value generated by applying a second hash function to e-book basis data including title information of the e-book, a first digest value generated by applying a first hash function to the e-signature-object information, an e-signature value generated by applying an encryption function employing a private key as an encryption key to the first digest value, and a public key value corresponding to the private key, and the e-book basis data; and

verifying integrity of the received e-book data by comparing at least one of a fifth digest value generated by applying the encryption function employing the public key as a decryption key to the e-signature value and a sixth digest value generated by applying the first hash function to the e-signature-object information with the first digest value.

8. The method of claim 7, further comprising verifying the integrity of the e-book data by comparing a ninth digest value generated by applying the second hash function to the e-book basis data with the fourth digest value and comparing an eighth digest value generated by applying the second hash function to e-book usage rights data including usage period information and legal user information of the e-book with a third digest value generated by applying the second hash function to the e-book usage rights data or comparing a seventh digest value generated by applying the second hash function to e-book encryption data including information on encryption of the e-book with a second digest value generated by applying the second hash function to the e-book encryption data,

wherein the e-book data further includes at least one of the e-book usage rights data and the e-book encryption data, and

the e-signature-object information further includes at least one of the third digest value and the second digest value.

9. The method of claim 7, further comprising accessing a copyright management apparatus based on access information of the copyright management apparatus and verifying usage rights to the e-book,

wherein the e-book basis data further includes the copyright management apparatus access information.

10. The method of claim 7, further comprising outputting the e-book data when it is determined that the received e-book data has not been falsified.

15. The method of claim 10, further comprising accessing a copyright management apparatus based on access information of the copyright management apparatus and verifying usage rights to the e-book,

wherein the e-book basis data further includes the copyright management apparatus access information.

16. The method of claim 10, further comprising outputting the e-book data when it is determined that the received e-book data has not been falsified.

11. A method of generating an electronic book (e-book), the method comprising:

generating a fourth digest value by applying a second hash function to e-book basis data including title information of the e-book;

generating a first digest value by applying a first hash function to e-signature-object information including the fourth digest value;

generating an e-signature value by applying an encryption function employing a private key as an encryption key to the first digest value; and

generating e-book data including e-book signature data including the e-signature-object information, the first digest value, the e-signature value, and a public key value corresponding to the private key, and the e-book basis data.

12. The method of claim 11, further comprising:

generating a third digest value by applying the second hash function to e-book usage rights data including usage period information and legal user information of the e-book; and

generating a second digest value by applying the second hash function to e-book encryption data including information on encryption of the e-book,

wherein the generating of the first digest value includes generating the first digest value by applying the first hash function to the e-signature-object information including the fourth digest value and at least one of the third digest value and the second digest value, and

the generating of the e-book data includes generating the e-book data including the e-book signature data and at least one of the e-book usage rights data and the e-book encryption data.